⚠️Install with caution. This skill has very few installs. Always review the source and verify it on clawhub.ai before installing. Community-built skills run with agent permissions — only install ones you trust.

🏗️ Other Cloud Platforms

Alibabacloud Cfw Exposure Detectionv0.0.2

Name: Alibabacloud Cfw Exposure Detection
Author: sdk-team

alibabacloud-cfw-exposure-detection

sdk-team

Query and analyze Alibaba Cloud public network exposure, identify unnecessary exposed assets and ports, assess exposure risks, and generate remediation recom...

latest

Download Package View on ClawHub

Installs (all time)

Installs (current)

Downloads

635

Stars

CreatedApr 1, 2026

UpdatedMay 11, 2026

Install & Quick Start

Install via ClawdBot CLI:

clawdbot install sdk-team/alibabacloud-cfw-exposure-detection

Skill Package8 files

📋SKILL.mdmarkdown

Failed to load file.

Quality Score

B55/100

Grade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.

Market Validation4/35

· 469 downloads (low demand)
· No tracked installs (may still have real users via manual install)

Documentation20/25

· SKILL.md present
· Detailed documentation (≥3000 chars)
· Contains usage examples or trigger description
· Detailed summary

Package Completeness6/15

· skillAssets present (7 files)

Security Analysis

💙 Low Risk

UNKNOWN_DATA_SINKhigh

Sends data to undocumented external endpoint (potential exfiltration)

POST → https://cloudfw.cn-hangzhou.aliyuncs.com/

SUSPICIOUS_PERMISSIONSmedium

Accesses system directories or attempts privilege escalation

sudo mv

UNDOCUMENTED_EXTERNALlow

Calls external URL not in known-safe list

https://ram.console.aliyun.com/manage/ak

AI Analysis

The skill's external API calls (cloudfw.cn-hangzhou.aliyuncs.com) are consistent with its stated purpose of querying Alibaba Cloud Firewall data and are directed to the official Alibaba Cloud service endpoint. The 'sudo mv' command is likely part of CLI tool installation/configuration, not privilege escalation. No evidence of credential harvesting, data exfiltration to unauthorized servers, or hidden malicious instructions exists.

💡

Usage Guide

Generated Jul 16, 2026

Cloud security engineersDevOps teams managing Alibaba Cloud infrastructureCompliance officers responsible for SOC2/ISO27001 auditsbeginner

💡 Application Scenarios

Public IP Exposure AuditCloud Security / Compliance

Security teams need to regularly audit their public IP addresses to find any exposed assets or ports that shouldn't be accessible from the internet. This skill queries Alibaba Cloud Firewall API to list all public IPs, detect exposed ports and services, and flag high-risk exposures for remediation.

New Exposure DetectionDevOps / Cloud Operations

When new cloud resources are provisioned, they might accidentally be exposed to the internet. This skill can detect exposures discovered in the last 7 days, allowing teams to quickly identify and fix unintended public access.

Firewall Coverage CheckSecurity Operations

Even if some assets are exposed, they may be protected by Alibaba Cloud Firewall. This skill checks the protection status of exposed assets to ensure firewall coverage, helping identify unprotected public endpoints.

Vulnerability Correlation with ExposureIncident Response / Vulnerability Management

Exposed assets with known vulnerabilities are high risk. This skill cross-references exposure data with vulnerability protection and attack events to identify critical risks that require immediate patching or access restriction.

💼 Business Models

Security Assessment as a ServiceSubscription or per-assessment fee

Offer periodic public network exposure assessments for clients using Alibaba Cloud. Generate reports on exposed IPs, ports, risk levels, and remediation recommendations to help clients improve their cloud security posture.

Compliance-Driven Audit ToolMonthly SaaS subscription based on number of accounts

Provide an automated tool for regulatory compliance (e.g., SOC2, ISO27001) that continuously monitors public exposure and generates evidence of security controls. Charge per cloud account per month.

Remediation Workflow IntegrationAnnual license fee or per-operation fee

Integrate exposure detection results into existing IT ticketing or remediation workflows (e.g., Jira, ServiceNow). Automatically create tickets for exposed assets, enabling quick action. Revenue from integration licensing or per-ticket fees.

💬 Integration Tip

Set up a cron job to run the detection workflow daily and send results to a Slack channel or email for continuous monitoring. For immediate response, integrate with webhooks to trigger alerts via PagerDuty or Opsgenie.